The short version, for busy parents: Galaxy Defender is a free educational math game for
young children. We do not show ads, do not sell or share your data, and do
not require an account. The pilot photo is never uploaded. We only ask for a parent's email if
you choose to turn on progress reports — and you can turn it off or delete everything at any time.
This Privacy Policy explains how AI Canadian Solutions ("we", "us", "our") handles information
in connection with the Galaxy Defender game and website (the "Game"). Because the Game is directed
to children, we have designed it to collect as little information as possible and to keep parents in control.
1. The short version
Galaxy Defender plays fully without any account, and by default your child's
progress lives on their own device. We collect no names, no photos and no birthdates
of children. There are no adverts and no third-party tracking. A grown-up may optionally create an
account so progress follows a child between devices — and can delete everything with one tap.
2. What we collect
a) On the device only (never sent to us)
A nickname the child types on the first screen, used only to greet them on screen.
Math progress, mastered facts, high scores, chosen ship and pilot, sound preference.
The optional pilot photo — held in browser memory, never uploaded, gone when the game closes.
b) Sent to us on every finished mission (no account needed)
Which game, how long it lasted, score, enemies destroyed, waves cleared, difficulty and mission
length, and how many math questions were answered correctly out of how many asked.
Which channel the game was opened from: browser, installed app, Google Play or App Store.
A random device identifier generated on the device. It is not an advertising ID
and not a fingerprint. We use it only to tell one device's repeat visits from many devices' single
visits.
None of this carries a name.
c) Only if a grown-up creates an account
The grown-up's name and email address, and a password (stored hashed, never readable).
A confirmation that they are the parent or guardian and over 18, with a timestamp.
Their timezone, and a country derived from it.
Their IP address at sign-in, kept for account security.
For each pilot profile: an age band (and optionally an exact age and school
grade if the grown-up volunteers them), an emoji, and the math mode. Never a name.
Profiles are labelled “Pilot 1”, “Pilot 2” and so on.
That pilot's play sessions, per-operation math accuracy, and which fact-family planets they have
mastered.
3. What we do not do
No advertising of any kind, and no advertising SDKs.
No third-party analytics SDKs, no social plugins, no cross-site tracking.
We never sell, rent or trade anything we hold.
We never use a child's information to build a marketing profile.
We never email a child. Email only ever goes to the grown-up who registered.
4. How we use it
To run the game — adapt the math difficulty, save progress, unlock ships.
To understand usage — how many missions are played and how the maths is
going, so we can improve the game. This is what COPPA calls support for internal operations.
To show a grown-up their child's progress in the Parent Zone.
To secure accounts — sign-in IP, and an approximate city an administrator
can check if an account looks compromised.
5. The parent gate
Anything aimed at adults — the Parent Zone, account creation, the report card, deletion —
sits behind a parent gate: a multiplication question intended for an adult rather than a young child.
Creating an account also requires an explicit confirmation that the person is the parent or guardian
and over 18.
6. Who else touches it
Service providers, acting only on our instructions and only as much as the job requires:
DigitalOcean — hosting.
Amazon Web Services (Canada, ca-central-1) — file and image storage.
SendGrid — email to a grown-up about their own account, such as confirming
a deletion.
ip-api.com — converts an adult's sign-in IP address into an approximate
city for security review. Not used for children's sessions.
Google Fonts — serves the game's typefaces.
7. Your choices & rights
Play without an account. The whole game works signed out.
Review everything. The Parent Zone shows the report card and a
question-by-question answer log.
Delete everything. “Delete My Child's Data” in the Parent Zone
permanently removes the account, every pilot profile, every play session, every math result and every
sign-in token. No backup copy is kept and it cannot be undone. We email the grown-up afterwards
listing what was removed.
Stop future collection. Sign out, or stop using the game.
8. How long we keep it
Anonymous guest play records, including the device identifier — 90 days,
then deleted automatically by a scheduled job.
Account data — kept while the account exists, deleted immediately on
request.
On-device data — stays until the grown-up clears it in the Parent Zone or
clears their browser storage. We cannot reach it.
9. Security
Everything travels over HTTPS. Passwords are hashed. Access to the admin panel is restricted to named
staff accounts. Store artwork is public by design; application builds are private.
10. Children
Galaxy Defender is designed for children and built so that no personal information from or
about a child reaches us. See our COPPA statement for the detail. If
you believe a child has given us something we should not hold, contact us and we will delete it
promptly.
11. International users
We are based in Canada and our data is stored in Canada. If you use the game elsewhere, your
information is processed in Canada under this policy.
12. Changes
If we change what we collect we will update this page and its date. Material changes affecting
children's information will be described plainly rather than buried.